Security Engineer

About the Role:

We are looking for a Security Engineer with 1-2 years of experience to join our Internal Security team.
This role combines hands-on cloud and security operations with support for GRC and compliance activities.
You will be involved in securing our cloud, SaaS, and AI-driven systems, monitoring security events, and helping maintain our overall security posture. In parallel, you will support customer security questionnaires and compliance processes.

What You'll Do:

• Monitor, triage, and investigate security alerts and incidents across cloud and security tools (EDR, CASB, ZTNA, SaaS security platforms, and identity providers), and support response and remediation activities
• Assist in securing cloud environments (AWS/GCP/Azure), including IAM, access controls, network security, and CI/CD pipeline security
• Work closely with DevOps and IT teams to implement and enforce security best practices across infrastructure, endpoints, and SaaS systems
• Support vulnerability management processes, including scanning, prioritization, and remediation tracking
• Support risk management processes by identifying, assessing, and tracking risks, including vulnerability management, remediation efforts, and control gaps
• Support customer security questionnaires (RFPs/RFIs) with accurate technical responses
• Assist in maintaining compliance with frameworks such as SOC 2 and ISO 27001, including preparing audit evidence and documentation

Who You Are?

• 1-2 years of experience in cybersecurity, cloud security, and security operations
• Basic hands-on experience with cloud platforms (AWS, GCP, or Azure)
• Understanding of core security concepts: IAM, networking, least privilege, and secure configurations
• Experience or strong interest in collaborating with DevOps and IT teams, alongside a focus on AI security, data protection, and emerging technologies
• Familiarity with security tools such as EDR, vulnerability scanners, or SaaS security solutions
• Strong analytical and troubleshooting skills, with high attention to detail and the ability to manage multiple tasks
• Good communication skills and ability to work cross-functionally
• Willingness to learn and grow in both technical security and GRC domains

Nice to Have:

• Experience with cloud security best practices and securing CI/CD pipelines and infrastructure-as-code (Terraform, etc.)
• Familiarity with identity systems (Okta, Azure AD, etc.)
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or NIST